CVE-2022-27239
- EPSS 0.12%
- Published 27.04.2022 14:15:09
- Last modified 21.11.2024 06:55:28
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
CVE-2019-3683
- EPSS 0.27%
- Published 17.01.2020 11:15:11
- Last modified 21.11.2024 04:42:19
The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. This allowed t...
CVE-2016-3710
- EPSS 0.09%
- Published 11.05.2016 21:59:01
- Last modified 12.04.2025 10:46:40
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Port...
CVE-2016-2107
- EPSS 79.14%
- Published 05.05.2016 01:59:03
- Last modified 12.04.2025 10:46:40
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against...
CVE-2015-7547
- EPSS 93.42%
- Published 18.02.2016 21:59:00
- Last modified 12.04.2025 10:46:40
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrar...